Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          50n/UDZbaRINe+xOiUDZ74AuFHqf9YcwC6vhTGQIuDo=
Subject key identifier:   C0:6B:5C:88:8C:90:C4:A2:D2:2C:A0:F9:B6:F0:26:BD:43:F3:DA:C6
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       700C2980D0B8872CFE0DC6E9597F1CE59375C90E
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:42:59 +0000
ROA not before:           Wed 04 Dec 2024 15:37:59 +0000
ROA not after:            Wed 03 Dec 2025 15:42:59 +0000
asID:                     53153
IP address blocks:        187.61.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 11:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0c:29:80:d0:b8:87:2c:fe:0d:c6:e9:59:7f:1c:e5:93:75:c9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:37:59 2024 GMT
            Not After : Dec  3 15:42:59 2025 GMT
        Subject: CN=C06B5C888C90C4A2D22CA0F9B6F026BD43F3DAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:52:d2:d5:1b:ec:5b:c1:98:30:90:b1:43:
                    2a:07:28:9e:30:e2:9b:c7:95:aa:84:b9:71:9f:03:
                    95:69:1d:21:94:3e:cf:32:04:b9:10:91:84:7f:b8:
                    62:9d:3f:f5:80:19:45:a4:7f:5f:23:4b:ef:60:b0:
                    63:30:7b:a7:92:e2:f0:1d:c9:ca:de:98:8a:da:65:
                    04:92:2e:8e:3d:1c:de:b8:5b:83:5c:d3:73:89:7c:
                    fd:ea:b5:b6:b1:c3:d4:55:8b:0e:53:07:45:a9:e5:
                    4d:05:e5:92:9f:da:49:d4:e7:3e:fd:85:5b:dc:39:
                    43:32:3f:38:4b:45:c0:c0:8f:a8:48:85:97:c8:fe:
                    94:b6:be:f2:58:31:e7:0c:f8:99:48:eb:1a:04:c5:
                    a2:cb:1f:cd:79:42:04:e9:fc:de:72:83:38:4b:f4:
                    87:f1:56:a8:69:61:57:a7:f8:ae:99:86:35:a6:c6:
                    ad:8a:ee:fd:71:13:34:ab:6f:47:cf:2e:2b:05:24:
                    a6:26:da:2a:71:41:b8:2f:83:1f:56:50:cd:22:16:
                    93:05:78:6d:c1:dc:79:a4:7f:a5:08:f2:65:3b:3e:
                    b6:9b:18:fe:e5:6b:dd:2a:6e:03:fb:2e:13:97:3f:
                    6e:bb:13:73:b1:3d:21:1f:fe:09:89:f1:76:9c:45:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6B:5C:88:8C:90:C4:A2:D2:2C:A0:F9:B6:F0:26:BD:43:F3:DA:C6
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:15:51:63:bc:bc:dd:5b:f9:28:c2:d3:b4:b0:f9:44:80:
         78:df:81:c6:2d:ea:ca:8d:9c:00:f6:18:6d:22:ae:79:dd:df:
         e6:3f:49:e0:8c:bf:8a:5e:2e:9b:fe:ff:b5:65:2e:73:fb:ea:
         b3:a1:c4:57:b5:f4:08:3f:28:fa:c9:92:e7:41:cc:42:73:5a:
         b4:4b:7e:89:c8:24:63:78:bf:fb:56:22:09:86:32:a5:16:f1:
         a1:bf:8a:27:33:21:00:0a:f1:7b:2f:49:46:a6:31:da:85:09:
         02:8b:b7:72:e9:64:76:40:01:8d:fd:3b:db:fd:f7:b8:2b:a1:
         1e:8c:45:32:8a:18:7e:ae:18:51:f2:55:9a:9f:69:92:14:0a:
         04:75:63:54:16:4c:7e:7c:42:ab:6d:33:3c:83:d7:d2:b7:2b:
         79:6d:48:b3:0b:ba:9a:16:59:4c:41:bd:10:e2:a9:93:56:a3:
         a5:52:3e:26:6f:4c:0b:e7:29:fb:c1:0a:ec:c1:6e:3e:04:06:
         00:31:08:fa:47:4b:06:c2:b1:38:84:ac:2f:db:df:fd:71:56:
         41:4f:ca:22:41:b3:2e:4b:10:25:68:f5:cb:4e:2e:f3:66:f2:
         0b:a6:66:e3:c5:b1:c5:16:51:48:6a:b7:d0:50:09:29:3b:8c:
         71:31:ac:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:13 2025 by rpki-client